Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a383030303a3a2f34302d3438203d3e20323037333134.roa
File:                     323630313a316430383a383030303a3a2f34302d3438203d3e20323037333134.roa (raw, json)
Hash identifier:          nLXJb3KLHEsqbkv+Dp6n0jzgQX7ausZqd7a+PZmhgEg=
Subject key identifier:   EF:40:38:F7:ED:ED:89:2B:7A:F4:72:9F:27:7B:89:0E:CF:56:8C:33
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       73F1DE3697564517C2E809D02803F99EA9CB083D
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a383030303a3a2f34302d3438203d3e20323037333134.roa
Signing time:             Thu 19 Sep 2024 10:07:39 +0000
ROA not before:           Thu 19 Sep 2024 10:02:39 +0000
ROA not after:            Thu 18 Sep 2025 10:07:39 +0000
asID:                     207314
IP address blocks:        2601:1d08:8000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f1:de:36:97:56:45:17:c2:e8:09:d0:28:03:f9:9e:a9:cb:08:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Sep 19 10:02:39 2024 GMT
            Not After : Sep 18 10:07:39 2025 GMT
        Subject: CN=EF4038F7EDED892B7AF4729F277B890ECF568C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:8c:51:e9:55:c8:45:ab:9c:05:cf:2e:ba:
                    f3:fb:e6:5b:f1:7c:04:bb:76:8f:17:0f:4d:cb:6e:
                    eb:32:92:2b:1e:d4:6b:fa:40:e1:4b:09:44:72:3b:
                    fc:fe:0e:a3:1c:dc:ba:13:fa:9c:d0:0d:2a:ea:49:
                    20:9e:cc:f6:b9:28:e6:3c:3d:c9:18:62:49:e0:0a:
                    ee:77:a3:71:94:73:eb:12:ee:6c:9a:b4:90:2c:a7:
                    87:cc:23:70:61:e2:c2:83:db:7d:bc:46:5e:ca:0f:
                    04:a6:06:74:a1:99:a4:1a:bd:ea:61:47:27:35:ed:
                    bd:2a:a2:19:82:24:b2:1f:6f:93:b7:8f:55:89:98:
                    49:a2:4a:63:82:e1:e9:d9:8d:46:ce:ef:50:82:2c:
                    fe:8c:3c:85:f1:b7:66:80:2e:10:5c:3c:a3:be:36:
                    e8:b9:f6:2e:b2:bb:ba:7e:79:da:c4:61:07:8d:d0:
                    3c:d0:f3:b0:87:2c:00:7c:af:b5:96:6c:52:0e:b5:
                    08:18:57:1d:35:9d:d4:75:af:a7:86:36:20:76:03:
                    f8:15:ce:23:4e:ab:40:9c:61:3f:b5:99:44:26:ba:
                    42:ef:e8:a6:0a:30:4e:0e:e6:76:e8:84:50:f8:51:
                    5f:b9:11:90:b8:a1:ca:7c:c5:9f:3f:a7:0f:7a:36:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:40:38:F7:ED:ED:89:2B:7A:F4:72:9F:27:7B:89:0E:CF:56:8C:33
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a383030303a3a2f34302d3438203d3e20323037333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:15:25:fc:bd:ec:f7:ce:49:45:18:ae:b3:1d:97:1f:ed:06:
         de:2b:1f:55:2d:e3:29:0b:ce:46:09:86:18:d8:97:31:c9:eb:
         b4:03:69:68:c5:e5:d7:e4:e6:83:d2:0b:97:1e:d8:c8:11:a7:
         ab:49:7a:f7:95:81:e9:30:d3:db:d5:5c:1f:f0:b6:77:a2:07:
         f2:3f:8f:0c:02:72:ab:27:a3:4f:8c:4d:11:3d:44:6c:53:65:
         ff:be:37:c7:2e:55:1a:35:39:72:a2:80:50:89:c7:ca:d2:1d:
         35:a4:c2:fa:56:bc:a3:0f:3d:b8:58:14:4d:a3:de:2a:f3:f3:
         3d:77:c0:a2:f7:e5:ff:b8:d3:11:61:75:54:ab:7d:c2:e2:ca:
         c7:a2:52:bd:e4:19:c7:ce:a1:ca:4f:fb:1d:75:41:85:fe:92:
         ef:35:0e:97:0e:87:86:e9:3b:4f:62:bc:4b:d7:47:50:52:89:
         48:6b:75:00:52:b1:0c:79:6e:3e:84:28:82:e4:c6:93:52:1e:
         ae:8c:5b:85:5c:3a:27:1b:a0:ca:cc:c1:a1:52:52:c4:5b:67:
         2a:9b:51:dc:8a:46:97:68:af:76:02:39:a9:10:e9:56:b8:9a:
         6b:31:98:f7:cd:32:3a:a5:bd:88:12:e0:8f:2f:84:8b:ee:28:
         39:83:ce:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----